Privacy Policy | ōForest

Privacy Notice

This privacy notice is provided in compliance with the Personal Data Protection Bill, 2019 (PDPB) and other relevant data protection legislation in India. It aims to inform you about how we collect, use, and protect your personal data and to ensure that you are aware of your rights under Indian data protection laws.

The Company

We are oForest Ltd. and we are the Data Controller for the personal data you provide to us. Our address is

A602 Arshiya Sky, LIC Road, Dharampura, Jagdalpur, Pin 494001, Chhattisgarh.

. You can contact us at contact@oforest.in.

Purpose for Processing Your Data & Legal Basis

We process your personal data to:

Sell our products to you through our website and retail partners (such as Etsy and Amazon).
Process your orders and shipments.
Send marketing materials, promotional offers, or discounts if you consent to receive them.

We obtain your personal data directly from you, either via transactions or through our retail partners. The data we process includes:

Name
Billing address
Delivery address
Email address
Payment details (processed via secure payment gateways)

We process this data based on Legitimate Interest as per Section 6 of the PDPB for the purpose of business operations and growth. If you fail to provide the required data, we may not be able to fulfill your order or provide our services.

For marketing communications, we will request your explicit consent to process your data (Section 6 of the PDPB). You have the right to withdraw consent at any time by contacting us.

We do not engage in automated decision-making.

Recipients of Your Data

We will not share your personal data with third parties without your consent, except in the following cases:

We may be required to disclose your data in compliance with legal obligations, such as a court order.
We may share limited personal data with external accountants for accounting and tax purposes.
If our business is sold, merged, or transferred, your data may be shared as part of that transaction.

Data Processed by Third Parties

We use third-party services for the processing of your data, including:

Cloud-based email and document storage.
Web hosting and video conferencing platforms.
Marketing platforms and reviews platforms.
Delivery and courier services.

These third parties process data on our behalf and are bound by data processing agreements to ensure your data is protected.

Data Transfer Outside India

Some of your personal data may be transferred to countries outside India, particularly to the USA, as part of the services provided by our marketing platform. This transfer is carried out under standard contractual clauses to ensure that your data is protected in accordance with Indian data protection laws.

Retention of Data

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Specifically:

Personal data related to financial transactions will be retained for 7 years to comply with taxation and audit requirements.
Personal data processed for marketing purposes will be deleted 2 years after the last interaction or response.

Your Rights

Under Indian data protection laws, you have the following rights:

Right to Access: You can request access to your personal data and obtain copies.
Right to Rectification: You can ask us to correct any inaccurate or incomplete data.
Right to Restriction: You can request us to restrict the processing of your data in certain circumstances.
Right to Erasure: You can request that we delete your personal data if it is no longer necessary for the purposes for which it was collected.
Right to Object: You can object to our processing of your data based on legitimate interest.

To exercise any of these rights, please contact us at contact@oforest.in.

You also have the right to lodge a complaint with the Data Protection Authority (DPA) in India if you believe your rights have been violated.